Which of the following is the MOST effective approach to communicate general information security responsibilities across an organization?

A. Require staff to sign confidentiality agreements.
B. Develop a RACI matrix for the organization.
C. Specify information security responsibilities in job descriptions.
D. Provide regular security awareness training.